Platform privacy notice

Published · Version 2 · 2 November 2026

M.MAZON LTD, trading as Tikyshop, a company registered in England and Wales with company number 14710944, registered office 1st Floor, 85 Mercian Way, Stockport, England, SK3 9DF. Support: support@tikyshop.com.

Tikyshop platform privacy notice

Who we are and who this notice covers

Tikyshop is operated by M.MAZON LTD, company number 14710944, registered in England and Wales. Contact support@tikyshop.com for privacy questions and requests.

Our registered office for postal correspondence is listed in the company details in our merchant terms (https://app.tikyshop.com/policies/merchant-terms). You can use support@tikyshop.com without writing to us by post.

Our ICO data protection registration reference is ZC286644. Tikyshop initially offers merchant accounts to UK-established businesses. This does not limit the privacy rights of people who visit our website or shop with a merchant from another country.

We are the controller of the personal data described here about visitors to our platform website, waiting-list applicants, merchants, their representatives and team members, and people who contact us. Each store's seller is normally the controller of its shoppers' data. We process store data on the merchant's instructions under our data processing terms; consult that store's privacy notice for its own purposes and choices. Where a shopper contacts us about a platform complaint or we must meet our own legal duties, this notice covers our handling of that contact or duty.

Read this notice with our cookies and storage notice (the Cookies and storage section of this privacy notice) and service-provider list (https://app.tikyshop.com/policies/service-providers). Merchants can also read the data processing schedule (the Data processing schedule in the merchant terms) for information we handle on their behalf.

What we collect and why

The information we collect depends on how you use Tikyshop. We collect information you provide, information generated when you use the service, and relevant information from your business administrator or a provider involved in the service you request. We limit collection to the purposes described below.

Website visitors, access applicants and support contacts

Information: Email address, access request, invitation status and communication preferences Where it comes from: You, or an administrator who invites you Why we use it: Respond to your request, manage access and send requested invitation updates. Optional promotional offers use a separate choice

Information: IP address, browser/device details, requested URLs, timestamps, errors and limited abuse-prevention identifiers Where it comes from: Your interaction with our website and our service providers Why we use it: Deliver the website, protect it from abuse and investigate faults. Optional measurement is addressed separately below

Information: Contact details and the content of enquiries, complaints and supporting material Where it comes from: You or someone authorised to act for you Why we use it: Respond, resolve problems, handle privacy requests and meet legal duties. Please do not send unnecessary sensitive information

Some security identifiers are hashed or pseudonymous. They can still be personal data and are not treated as anonymous merely because they are protected in this way.

To limit repeated sign-in attempts, we use protected digests derived from the submitted email address and the network source, together with attempt counts and temporary cooldown times. These limiter records do not contain the submitted password or plain-text email or network address. They are necessary security records, separate from optional website measurement.

Merchants and their team members

Information: Name, email, phone number where supplied, business details, password verification data and chosen settings Where it comes from: You or your business administrator Why we use it: Set up and operate the account, contact you about the service and maintain account security

Information: Workspace/store membership, role and invitation records Where it comes from: Authorised administrators and your use of the service Why we use it: Give the correct people access and enforce permissions. An account invitation is different from an invitation to join an existing team

Information: Subscription plan, invoicing details, amounts, dates, offers, payment status and refund information Where it comes from: You, our billing records and our payment provider Why we use it: Charge for the service, apply eligible offers, manage subscriptions and refunds, and maintain accounting records

Information: Activity, permissions, approvals and connection records Where it comes from: Account use and authorised AI or other connections Why we use it: Carry out requested operations, enforce access, support revocation and investigate changes

Information: Domain names, ownership/DNS information, setup status and relevant provider responses Where it comes from: You, public DNS and the provider involved in setup Why we use it: Connect the requested domain and diagnose setup problems. Credentials are handled through the supported secure connection process, not ordinary support messages

Stripe handles payment credentials. Through our normal checkout, Tikyshop receives relevant payment and account-status information, not the full card number or card security code. Stripe may separately collect information needed for your connected payment account under its own terms.

Shoppers at merchant stores

The merchant normally determines how its shoppers' information is used. On its instructions, we process information needed for its store, such as contact and delivery details, order and payment-status records, comments, reviews, drop-alert requests and applicable privacy choices. Optional store measurement is subject to the shopper controls described in our cookies notice and that store's notice. Contact the merchant about purchases and its own privacy practices; contact us about processing for which Tikyshop is responsible.

Purposes and lawful bases

Purpose: Provide an account, store subscription and requested pre-contract assistance Information used: Account, business, membership and subscription records Basis: Contract or requested pre-contract steps for an individual subscriber; legitimate interests in serving the organisation where you act for it

Purpose: Manage a waiting-list request and send the requested access invitation Information used: Email, request and invitation status Basis: Requested pre-contract steps where applicable, otherwise legitimate interests in responding to the business request

Purpose: Send optional promotional offers Information used: Email, consent and preferences Basis: Consent; refusal does not prevent the account or service

Purpose: Operate team invitations, permissions, notices and support Information used: Membership, activity and correspondence Basis: Contract where applicable; otherwise legitimate interests in operating the service securely and responding to enquiries

Purpose: Prevent abuse, protect accounts and investigate faults Information used: Technical, security and activity records Basis: Legitimate interests in a secure, reliable service; legal obligations where applicable

Purpose: Account for subscription payments and meet tax duties Information used: Billing, invoice and refund records Basis: Contract where applicable and legal obligations

Purpose: Handle complaints and legal claims Information used: Relevant correspondence and records Basis: Legitimate interests in resolving complaints and protecting legal rights, or legal obligations

Purpose: Understand landing-page access conversion and improve the service Information used: The optional landing visit and conversion records described below Basis: Consent; necessary security and service records remain separately governed by their purposes above

Where we rely on legitimate interests, we assess necessity and the impact on people, and limit the information used. You may ask about that assessment and object. We do not sell personal data. We do not use merchant or shopper data to train AI models.

Website measurement and optional technologies

With your permission, we count visits to the early-access landing page and whether they lead to a waiting-list request or redeemed invitation. This helps us improve the access journey. The current measurement does not record video interactions, arbitrary clicks, merchant-console journeys, session recordings or the contents of what you type or upload. Any later expansion needs an accurate notice and fresh consent where required.

Measurement uses a random visit identifier, landing variant, experiment name and creation timestamp. If you agree to measurement and request access, we can link that visit to your request email and subsequently redeemed invitation. These are personal data, not anonymous statistics. The optional visit-event payload contains no email, URL/query string, device fingerprint or form text. Operational security logs remain separate. We use our existing hosting and database providers for these records, without sending them to an advertising or external analytics service.

You can decline optional measurement without losing access to the waiting list or core service, and withdraw permission using Cookie choices in the landing-page footer. Withdrawal clears this browser's optional identifier and removes its request-attribution link, stopping future signup attribution through it. It does not automatically erase every record already received or change choices on other browsers. Contact us for a broader privacy request. We separately process information needed to operate the service, prevent abuse and keep required transaction records.

Behavioural measurement does not include passwords, authentication codes, payment-card details, private messages or free-text form contents. This notice does not authorise session recordings, advertising tracking, or using merchants' shopper data for Tikyshop's own cross-store marketing. Those would need a separate assessment, accurate disclosures and applicable permissions before introduction.

Our cookies and storage notice explains relevant device storage. Acceptance of merchant terms is not consent to optional tracking. A merchant's separately enabled analytics belongs to its store and needs that merchant's privacy information and applicable shopper choices. No Google Analytics integration is represented as active merely because the software supports it.

AI and other services you connect

An authorised AI connection receives only the information its permissions allow. Read and write permissions are distinct: a draft-creation permission does not automatically include store or catalogue read access. Broader permissions may allow catalogue edits or access to order and shopper information. Protected operations use the platform's approval process, and permitted operations are recorded.

Your business chooses the AI service and is responsible for its relationship with that provider. Its own terms govern the data it receives and any retention or model-training settings it offers. Revoking access stops future access through the grant; it cannot retrieve copies already received. We do not treat a merchant's choice of AI provider as permission to send other stores' data to it.

The same distinction applies to a merchant's own analytics property, domain provider or payment account: actual responsibilities depend on the service and contract. The service-provider schedule distinguishes providers we engage from those you independently select.

Recipients and international transfers

We share information needed to supply the service with providers of hosting and storage, security and abuse prevention, communications and payments. Our service-provider list (https://app.tikyshop.com/policies/service-providers) names those providers and explains their functions, relevant data and processing locations. People and suppliers acting for us receive access for their stated work under appropriate confidentiality and data protection arrangements.

We may disclose necessary information to professional advisers, insurers, courts and authorities for advice, legal claims or legal obligations. A lawful business transfer may require limited disclosure to a potential buyer or successor under appropriate confidentiality; we explain material changes to the controller or processing. A request from a third party does not automatically entitle it to store or account information.

Processing outside the UK requires an applicable recognised transfer mechanism, such as adequacy regulations or approved contractual safeguards, with further assessment and protection where required. Ask support@tikyshop.com for relevant information about safeguards. UK data hosting does not mean all support access, delivery or provider operations remain in the UK.

Retention

We retain data for the purpose it serves and delete or anonymise it under our retention procedures. Some procedures are performed manually. A request to delete data does not remove records we must lawfully retain, but we limit retained information and access.

When setting a period, we consider why the information is needed, how sensitive it is, whether a less identifying record would serve the purpose, any applicable legal duties and unresolved disputes. We distinguish information needed to run an active account from optional behavioural records and material kept after closure. Information is not anonymous if it can still be connected to an identifiable person.

Our retention periods and criteria are set out below:

Record: Active account and necessary store records Period or trigger: While providing the service, followed by the closure process; the separate periods below still apply

Record: Closed-store operational and shopper data Period or trigger: A 30-day export window, then managed deletion or anonymisation once outstanding orders, refunds and messages are resolved, subject to the merchant's instructions and applicable legal obligations

Record: Unconverted waiting-list requests Period or trigger: 12 months from the original request; duplicate requests do not restart this period

Record: Converted applicants Period or trigger: Redundant applicant details minimised within 30 days of completed onboarding; necessary account and invitation evidence is handled separately

Record: Invitations Period or trigger: Unused invitations: minimised 12 months after issue. Redeemed or revoked invitations: minimised 12 months after that event; minimum replay-prevention evidence may remain

Record: Accepted access-message records Period or trigger: Recipient and content evidence minimised 12 months after acceptance; unresolved delivery outcomes are investigated before minimisation

Record: Subscription invoices and tax records Period or trigger: Six years from the end of the last company financial year they relate to, or longer where a specific legal requirement applies

Record: Security and audit records Period or trigger: Normally 12 months from the event; a documented incident, legal requirement or claim may require a limited longer hold

Record: Temporary sign-in attempt counters Period or trigger: Cooldowns lapse automatically. Expired counter rows are removed in bounded batches during later sign-in activity; they are not deleted immediately when a cooldown ends and may remain while the service is idle. They remain subject to our security-record review above

Record: Durable delivery or processing identifiers Period or trigger: Minimum evidence needed to prevent duplicate operations; unnecessary message content and addresses are removed separately

Record: Support correspondence Period or trigger: While resolving the enquiry, then 12 months after resolution unless a specific legal need requires longer

Record: Unattached uploads Period or trigger: 30 days under the cleanup procedure

Record: Operational application and scheduled-job logs Period or trigger: 30 days

Record: Identifiable landing measurement and request-attribution links Period or trigger: 30 days from collection, then deletion or genuinely anonymous aggregation

Record: Planned-change recovery copies Period or trigger: Deleted within 30 days of the change, subject to applicable obligations and a narrowly justified, documented hold; recorded deletions are reapplied when restoring data

We retain the minimum suppression and consent evidence needed to honour marketing choices while the relevant mailing programme operates, reviewing necessity annually. Withdrawing consent stops marketing; retaining an opt-out prevents it restarting. This is not a reason to retain full correspondence or a marketing profile indefinitely.

Provider email logs and backups can follow separate service-specific periods described in our service-provider list. Browser preference and identifier expiry is explained in our cookies notice and does not itself delete server records. A documented hold identifies the necessary records, purpose and review date; it does not extend retention of unrelated information.

Choices and rights

You can withdraw marketing consent using the message's preference or unsubscribe option, or by contacting support@tikyshop.com. Service and security messages necessary for an account or transaction may still be sent. An optional promotion must not be added to a service message to bypass a marketing preference.

Subject to applicable conditions and exceptions, you can request access, correction, erasure, restriction and portability of your personal data, and object to processing based on legitimate interests. You may withdraw consent without affecting the lawfulness of earlier processing. We may need proportionate information to confirm your identity. We normally respond within one month, explaining any lawful extension.

You can complain directly to the Information Commissioner's Office at https://ico.org.uk/make-a-complaint/. You do not have to contact us first. We welcome the opportunity to resolve a concern.

Security and changes

We use measures appropriate to the risks, including access controls, protection of credentials, monitoring and encryption where applicable. No online service can guarantee absolute security. Do not email passwords or access tokens.

We publish a dated version when this notice changes and notify affected people of significant changes where appropriate. We seek fresh consent where required rather than treating a notice update as consent to a new purpose.

Tikyshop cookies and storage notice

Tikyshop, operated by M.MAZON LTD, uses cookies and browser storage for sign-in, requested settings and supported website functions. Some technology can also measure visits or remember optional preferences. Contact support@tikyshop.com about these uses.

Platform website and administration

Technology: `__Secure-authjs.session-token` (may have numbered chunks) Purpose: Keep you signed in Duration: 30 days, renewed when your session is refreshed Choice and status: Required for authenticated functions

Technology: `__Host-authjs.csrf-token` Purpose: Protect authentication requests against cross-site forgery Duration: Browser session Choice and status: Required security function

Technology: `__Secure-authjs.callback-url` Purpose: Remember the authentication return location Duration: Browser session Choice and status: Used for the requested authentication flow

Technology: `dappacat_admin_store` Purpose: Remember the store selected in the admin Duration: One year Choice and status: Requested account preference; legacy name does not limit it to DAPPACAT and does not grant membership

Technology: `tiky_store_preview` Purpose: Permit an authorised unpublished-store preview Duration: One hour Choice and status: Used for the requested preview

Technology: `color-scheme` local storage Purpose: Remember your chosen display theme Duration: Until cleared or changed Choice and status: User-selected preference

Technology: `tikyshop-measurement-choice` Purpose: Remember acceptance or rejection of landing-page measurement and the notice version Duration: 180 days from the choice Choice and status: Necessary to honour your chosen privacy setting; set only after you choose

Technology: `tikyshop-access-experiment` Purpose: Associate permitted landing visits and access conversions with a pseudonymous visit identifier and page variant Duration: 30 days Choice and status: Optional: only set and used after acceptance; cleared on rejection or withdrawal

Browser expiry does not delete server-side records. Our platform privacy notice explains how we retain account information, access requests and other personal data.

We must obtain consent before optional storage or access unless a specific legal exception applies and its conditions are met. Refusing optional measurement must not prevent an access request or sign-in. Agreement to our terms does not provide cookie consent.

Optional landing measurement counts visits, waiting-list requests and invitation redemptions. If you consent and request access, the visit can be linked to your email and subsequently redeemed invitation. It does not record individual video plays, arbitrary button clicks, merchant-console activity or what you type. Those additional forms of measurement are not enabled by this notice.

Use Cookie choices in the landing-page footer to accept, reject or change your decision. Rejecting measurement does not prevent an access request, sign-in or use of the core service. Withdrawal clears this browser's measurement identifier and removes its waiting-list attribution link, preventing subsequent invitation redemption being linked through that request. It does not undo completed operations or automatically erase every record already received. A choice in one browser does not automatically change another browser's choice; contact us for broader requests. Permission for promotional emails is separate.

You may also clear or block storage using your browser. Blocking necessary session storage can prevent sign-in or other requested functions. Clearing a browser identifier does not automatically erase information already received by the platform.

Stores powered by Tikyshop

Each store's seller supplies its own privacy and cookie information. The existing storefront inventory includes the bag identifier (60 days), feed-session identifier (30 minutes), chosen market (180 days), checkout-recovery markers, privacy preference (six months), and local settings such as saved items and display preferences. The precise storage and controls depend on the enabled features.

Storefront privacy choices separate optional usage measurement and remembering activity on the device. These optional purposes are off until you choose them. You can change your choices on the storefront. Withdrawal stops future collection for the relevant purpose and clears the related local state; it cannot recall data already received. A platform notice does not replace those shopper choices.

Connected payment, AI, DNS or analytics providers have their own notices for the pages and services they operate. Their cookies must not be described as Tikyshop cookies without identifying the actual deployment. A merchant enabling Google Analytics must disclose its property and actual use, not assume this platform notice covers it.

Text fingerprint (SHA-256): e8eac1df105525d9ccf66cbcf4872cc7cabd074e48478122bb3d2fa0473bedd2

Questions: support@tikyshop.com